Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS134176.roa
File:                     AS134176.roa (raw, json)
Hash identifier:          ZUDxxc3e5cRJsiF+OnSTNTf94rOyPWP1asI0vUHqenE=
Subject key identifier:   B2:07:01:34:65:85:4C:C8:DE:49:A5:9C:B1:2D:82:6F:9A:0C:47:0C
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       48891461DDF74F8B874CAA310E6D61A9ED662473
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS134176.roa
Signing time:             Fri 03 Jan 2025 02:28:23 +0000
ROA not before:           Fri 03 Jan 2025 02:23:23 +0000
ROA not after:            Fri 02 Jan 2026 02:28:23 +0000
asID:                     134176
IP address blocks:        192.228.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:89:14:61:dd:f7:4f:8b:87:4c:aa:31:0e:6d:61:a9:ed:66:24:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jan  3 02:23:23 2025 GMT
            Not After : Jan  2 02:28:23 2026 GMT
        Subject: CN=B207013465854CC8DE49A59CB12D826F9A0C470C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c6:98:b3:91:a0:a6:ae:b9:a4:a1:19:e5:56:
                    13:c8:3e:5e:04:87:f9:c6:64:cd:0f:35:b4:04:0d:
                    0f:e5:23:39:af:6e:69:39:9b:df:f8:01:fd:ef:b3:
                    4e:06:7d:53:6f:94:0e:21:67:22:3d:98:db:d3:65:
                    82:0d:53:c4:78:ce:ef:21:d5:49:be:00:54:22:a4:
                    b8:33:1a:cb:2e:1c:9d:93:34:a9:8c:4d:d5:a3:26:
                    31:58:b3:6c:f1:7c:89:81:40:ab:8d:3b:12:db:0b:
                    c0:16:17:8d:26:59:41:b3:72:a1:36:d7:3e:38:80:
                    1c:a5:d1:0e:5e:aa:8b:90:b8:b6:f7:be:1b:83:76:
                    cb:f4:71:ea:60:55:f8:23:8a:d0:40:c7:61:b3:f7:
                    ae:0b:44:09:e2:7d:39:2f:9b:91:fc:10:e4:19:e2:
                    2c:87:32:37:23:1c:17:e4:08:28:5e:0f:02:b1:69:
                    ee:3b:0e:5e:6f:40:1d:26:84:5b:5a:70:d5:42:a7:
                    ef:89:54:5d:67:e5:4b:74:24:48:85:a6:2d:8e:21:
                    84:c0:1f:cc:29:45:1b:87:15:bb:d6:3f:45:84:93:
                    ce:0c:fd:92:b6:0f:92:8f:f3:04:a0:91:bb:b7:8a:
                    07:c7:cf:8f:5a:f4:c0:b9:9d:f2:03:bc:2c:a3:2c:
                    c5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:07:01:34:65:85:4C:C8:DE:49:A5:9C:B1:2D:82:6F:9A:0C:47:0C
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS134176.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:9f:7b:fa:be:14:81:9c:3b:56:5f:2b:4c:b1:60:7c:54:7c:
         e3:31:8c:58:da:1b:62:c4:de:6d:18:16:f0:95:a0:45:3b:21:
         74:06:2f:6b:d0:15:04:be:cf:34:b1:f0:ac:a1:b0:f7:2b:40:
         d0:66:0a:de:20:9f:05:48:52:40:e7:69:2e:35:5d:8d:a0:a9:
         7c:f9:de:5a:4c:43:d2:be:a3:f3:a3:ba:62:d2:2b:6a:10:8b:
         aa:42:15:b0:1e:76:db:a6:a2:51:f8:69:77:d4:ef:be:af:65:
         b8:83:4d:7d:b4:a0:60:b0:a4:87:dd:46:d3:81:59:5b:d5:8a:
         07:d2:19:08:3b:4d:3f:8b:3b:43:0b:a0:1f:a0:fd:83:2c:8e:
         b0:f1:04:96:27:fa:9b:b6:00:68:cf:2f:11:18:7c:7c:8a:82:
         d1:e7:d2:bb:02:19:56:be:54:3e:5f:82:c6:79:16:9b:34:37:
         fc:5e:05:10:c1:4c:f2:dc:70:54:51:9e:b0:9e:ee:ac:40:4a:
         0c:c3:15:c3:22:6b:de:11:fb:78:b2:62:6c:b4:eb:a7:68:2f:
         b0:5f:bd:23:41:fc:f0:17:04:6e:5e:2d:4b:3e:7c:c9:a0:53:
         39:eb:70:1e:80:85:5a:de:82:58:80:4e:5b:0e:15:ed:fa:93:
         b9:12:cf:9a
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUSIkUYd33T4uHTKoxDm1hqe1mJHMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwMTAzMDIyMzIzWhcNMjYwMTAyMDIyODIz
WjAzMTEwLwYDVQQDEyhCMjA3MDEzNDY1ODU0Q0M4REU0OUE1OUNCMTJEODI2RjlB
MEM0NzBDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1saYs5Ggpq65
pKEZ5VYTyD5eBIf5xmTNDzW0BA0P5SM5r25pOZvf+AH977NOBn1Tb5QOIWciPZjb
02WCDVPEeM7vIdVJvgBUIqS4MxrLLhydkzSpjE3VoyYxWLNs8XyJgUCrjTsS2wvA
FheNJllBs3KhNtc+OIAcpdEOXqqLkLi2974bg3bL9HHqYFX4I4rQQMdhs/euC0QJ
4n05L5uR/BDkGeIshzI3IxwX5AgoXg8CsWnuOw5eb0AdJoRbWnDVQqfviVRdZ+VL
dCRIhaYtjiGEwB/MKUUbhxW71j9FhJPODP2Stg+Sj/MEoJG7t4oHx8+PWvTAuZ3y
A7wsoyzFzQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFLIHATRlhUzI3kmlnLEtgm+a
DEcMMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzEzNDE3Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcDkfDANBgkqhkiG9w0BAQsFAAOC
AQEAJ597+r4UgZw7Vl8rTLFgfFR84zGMWNobYsTebRgW8JWgRTshdAYva9AVBL7P
NLHwrKGw9ytA0GYK3iCfBUhSQOdpLjVdjaCpfPneWkxD0r6j86O6YtIrahCLqkIV
sB5226aiUfhpd9Tvvq9luINNfbSgYLCkh91G04FZW9WKB9IZCDtNP4s7QwugH6D9
gyyOsPEElif6m7YAaM8vERh8fIqC0efSuwIZVr5UPl+CxnkWmzQ3/F4FEMFM8txw
VFGesJ7urEBKDMMVwyJr3hH7eLJibLTrp2gvsF+9I0H88BcEbl4tSz58yaBTOetw
HoCFWt6CWIBOWw4V7fqTuRLPmg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:27:16 2025 by rpki-client